[LU-11500] kernel update [RHEL6.10 2.6.32-754.6.3.el6]

• Type: Bug
• Resolution: Fixed
• Priority: Minor
• Fix Version/s: Lustre 2.10.6
• Severity: 3
• Assignee: Jian Yu
• Reporter: Jian Yu

Description

Upstream details at: https://access.redhat.com/errata/RHSA-2018:2846

Security Fix(es):

• A flaw named FragmentSmack was found in the way the Linux kernel handled reassembly of fragmented IPv4 and IPv6 packets. A remote attacker could use this flaw to trigger time and calculation expensive fragment reassembly algorithm by sending specially crafted packets which could lead to a CPU saturation and hence a denial of service on the system. (CVE-2018-5391)
• kernel: Integer overflow in Linux's create_elf_tables function (CVE-2018-14634)

Issue Links

• is related to: LU-11745 kernel update [RHEL6.10 2.6.32-754.9.1.el6]
• is related to: LU-11254 kernel update [RHEL6.10 2.6.32-754.3.5.el6]

Comments

[Peter Jones]

Landed for 2.10.6

[Gerrit Updater]

John L. Hammond ([e-mail]) merged in patch https://review.whamcloud.com/33348/
Subject: LU-11500 kernel: kernel update RHEL6.10 [2.6.32-754.6.3.el6]
Project: fs/lustre-release
Branch: b2_10
Current Patch Set:
Commit: 0dd613497923f272cef1c23393df9e272a2603b7

[Gerrit Updater]

Jian Yu ([e-mail]) uploaded a new patch: https://review.whamcloud.com/33348
Subject: LU-11500 kernel: kernel update RHEL6.10 [2.6.32-754.6.3.el6]
Project: fs/lustre-release
Branch: b2_10
Current Patch Set: 1
Commit: ffe1189eec6830e2b1f35b488209af58b0034f7e